Filters—Distinct

This page uses adding filters to an AI Engine Rule as an example. The names of windows and setting options vary slightly depending on where you are creating or modifying a filter.

The Distinct tab appears on all Not Observed Scheduled AI Engine Rule blocks.

In the example, this rule block will be evaluated with any occurrence of a log having the IP Address (Origin) of 10.100.1.2 or 10.100.1.3.

To create a list of distinct values

1. Select a field, click Add, and enter the Field Filter Values.
2. (Optional) Add additional fields.

The total number of Events that are generated can be limited by how you define Event Suppression on the Settings tab of the AI Engine Rule Wizard Tabs.